1/2/2019<month year> doc.: IEEE 802.15-12-0318-00 Jan 2013 Project: IEEE P802.15 Working Group for Wireless Personal Area Networks (WPANs) Submission Title: [Security protocol of IEEE 802.15.9 and its implication] Date Submitted: [Jan, 2013] Source: [Junbeom Hur, Sungrae Cho] Company [Chung-Ang University, Korea] E-Mail:[jbhur@cau.ac.kr, srcho@cau.ac.kr] Re: [This is the original document] Abstract: [This documents presents the key management protocol of IEEE 802.15.9 and considers its possibility to utilize it with IEEE 802.15.8] Purpose: [To improve security protocols of IEEE 802.15.8] Notice: This document has been prepared to assist the IEEE P802.15. It is offered as a basis for discussion and is not binding on the contributing individual(s) or organization(s). The material in this document is subject to change in form and content after further study. The contributor(s) reserve(s) the right to add, amend or withdraw material contained herein. Release: The contributor acknowledges and accepts that this contribution becomes the property of IEEE and may be made publicly available by P802.15. Junbeom Hur and Sungrae Cho, Chung-Ang University <author>, <company>

Security protocol of IEEE 802.15.9 1/2/2019<month year> doc.: IEEE 802.15-12-0318-00 Jan 2013 Security protocol of IEEE 802.15.9 & its implication Junbeom Hur, Sungrae Cho Chung-Ang University Junbeom Hur and Sungrae Cho, Chung-Ang University <author>, <company>

Contents Introduction of 802.15.9 1/2/2019<month year> doc.: IEEE 802.15-12-0318-00 Jan 2013 Contents Introduction of 802.15.9 Description of Key Management Protocol (KMP) Implication & Discussion with 802.15.8 Junbeom Hur and Sungrae Cho, Chung-Ang University <author>, <company>

Jan 2013 IEEE 802.15.9 Introduction Defines a recommended practice for the transport of Key Management Protocol(KMP) for WPANs Defines a message exchange framework based on information element(IE) as a transport method for KMP datagrams and guidelines for the use of some existing KMPs with the IEEE 802.15.4 and IEEE 802.15.7 IETF’s HIP (Host Identity Protocol) IKEv2 (Internet Key Exchange version 2) PANA IEEE Std 802.1x Does not create a new KMP Junbeom Hur and Sungrae Cho, Chung-Ang University

Jan 2013 Why IEEE 802.15.9 ? IEEE 802.15.4 and IEEE 802.15.7 have always supported datagram security However, they have not provided a mechanism for establishing the keys This results in weak keys, which is a common avenue for attacking the system Adding KMP support is critical to a proper security framework Junbeom Hur and Sungrae Cho, Chung-Ang University

Jan 2013 Description The Key Management Transport is encapsulated in payload IEs. As key management payload may exceed the MPDU, a frame chaining method (using Forced ACKs) will provide the needed fragmentation support Junbeom Hur and Sungrae Cho, Chung-Ang University

KMP IE Format ID = Varies by standard (i.e. 802.15.4 or 802.15.7) Jan 2013 KMP IE Format ID = Varies by standard (i.e. 802.15.4 or 802.15.7) Length = KMP fragment + 1; maximum value varies by standard IE Content Control Field – 1 byte Chaining Flag – 1 bit 0 = last/only one 1 = yes chaining Multipurpose ID/Chaining count – 7 bits First packet provides Multipurpose ID ID range 98 – 126, 97 & 127 reserved ID = 98 for KMP Chain count (1 – 96 to disambiguate count from ID) 1 = 1st fragment 2 = 2nd fragment 96 = last possible fragment KMP fragment First KMP fragment KMP type – 1 byte KMP payload fragment Additional KMP fragments KMP type 1 802.1X 2 HIP 3 IKEv2 4 PANA 5 SAE Junbeom Hur and Sungrae Cho, Chung-Ang University

KMP Transport Mechanism Jan 2013 KMP Transport Mechanism Handle triggers to/from KMP higher layer Pass through for KMP payloads Triggers from MAC events to KMP DATA higher layer Other IE processes KMP Key Request Keys Data Traffic Information Element Shim IE frames Data MCPS MAC Services PHY Services Junbeom Hur and Sungrae Cho, Chung-Ang University

Jan 2013 Discussion What about 802.15.8? Can we adopt existing KMPs like 802.15.9? Considering infrastructureless architecture Communication architecture Security architecture Should we consider higher layer security? KMP in 802.15.9 is deployed above the MAC layer Junbeom Hur and Sungrae Cho, Chung-Ang University